treewide: Format with shellcheck, jsonlint and yamllint

attic/templates/policies/generate-external-admin-rolebinding.yaml

@@ -12,8 +12,8 @@ metadata:
     policies.kyverno.io/minversion: 1.7.0
     kyverno.io/kubernetes-version: "1.23"
     policies.kyverno.io/description: >-
-      Customers should not have full admin permissions on their own namespaces.  
-      This policy will generate a RoleBinding, binding their group_id to 
+      Customers should not have full admin permissions on their own namespaces.
+      This policy will generate a RoleBinding, binding their group_id to
       the Cluster-Admin clusterrole. This will still only apply to the namespace as
       the resource is a rolebinding, not clusterrolebinding.
       This policy should not trigger on any namespaces with label component=sys

attic/templates/policies/prometheus-add-folder-to-default-dashboards.yaml

@@ -24,7 +24,7 @@ spec:
             grafana_folder: Prometheus-stack
       targets:
       - apiVersion: v1
-        kind: ConfigMap        
+        kind: ConfigMap
         name: "{{`{{ request.object.metadata.name }}`}}"
     name: generate-dashboard-folder-annotation
     skipBackgroundRequests: true

attic/templates/policies/sync-regcred.yaml

@@ -13,7 +13,7 @@ metadata:
       is time consuming and error prone. This policy will copy a
       Secret called `regcred` which exists in the `default` Namespace to
       new Namespaces when they are created. It will also push updates to
-      the copied Secrets should the source Secret be changed.            
+      the copied Secrets should the source Secret be changed.
 spec:
   rules:
   - name: sync-image-pull-secret

attic/templates/policies/whitelist-internal-ingresses.yaml

@@ -9,12 +9,12 @@ metadata:
     policies.kyverno.io/severity: medium
     policies.kyverno.io/subject: Ingress
     policies.kyverno.io/description: >-
-      Ingresses with the label "internal=true" should be whitelisted. 
-      If no whitelist exists, add the default values, otherwise append 
+      Ingresses with the label "internal=true" should be whitelisted.
+      If no whitelist exists, add the default values, otherwise append
       whitelist to the already existing ones
 spec:
   mutateExistingOnPolicyUpdate: false
-  #precondition: has whitelist annotation or 
+  #precondition: has whitelist annotation or
   rules:
   - name: ensure-nginx-whitelist-exists
     match: